The contract lacks a function to update the upliftFeeBps
variable. Based on its implementation, it seems the protocol intends for upliftFeeBps
to be adjustable over time. Evidence supporting this includes:
Not Immutable: The upliftFeeBps
variable is not declared immutable, implying it is meant to be updated.
Update in afterUpdate
: The upliftFeeBps
value is assigned within the afterUpdate
function, indicating an expectation for it to change.
HookUpliftWithdrawalFeePercentageChanged
event
Introduce a function to allow the owner or an authorized entity to modify upliftFeeBps
. This would provide flexibility for adjusting fees as needed by the protocol.
Likelihood: Low, it cannot be changed but should not need to be changed often. Impact: Low, the code still works with fees.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.